-
Notifications
You must be signed in to change notification settings - Fork 12
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: updated tfsec.yml file and bug:updated changelog.yml name (#37)
* bug:updated changelog.yml name feat: updated tfsec.yml file * feat:updated changelog.yml name and file feat: updated tfsec.yml file
- Loading branch information
1 parent
8c720a6
commit 069e255
Showing
2 changed files
with
8 additions
and
39 deletions.
There are no files selected for viewing
5 changes: 2 additions & 3 deletions
5
.github/workflows/changelog.yaml → .github/workflows/changelog.yml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,14 +1,13 @@ | ||
name: changelog | ||
permissions: write-all | ||
|
||
on: | ||
push: | ||
tags: | ||
- "*" | ||
# Allows you to run this workflow manually from the Actions tab | ||
workflow_dispatch: | ||
jobs: | ||
call-workflow-changelog: | ||
changelog: | ||
uses: clouddrove/github-shared-workflows/.github/workflows/changelog.yml@master | ||
secrets: inherit | ||
with: | ||
branch: 'master' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,41 +1,11 @@ | ||
name: tfsec | ||
permissions: write-all | ||
on: | ||
pull_request: | ||
|
||
workflow_dispatch: | ||
jobs: | ||
tfsec: | ||
name: tfsec sarif report | ||
runs-on: ubuntu-latest | ||
|
||
steps: | ||
- name: Clone repo | ||
uses: actions/checkout@master | ||
|
||
- name: tfsec | ||
uses: aquasecurity/tfsec-sarif-action@v0.1.0 | ||
with: | ||
sarif_file: tfsec.sarif | ||
working_directory: ./_example | ||
full_repo_scan: true | ||
|
||
- name: Upload SARIF file | ||
uses: github/codeql-action/upload-sarif@v1 | ||
with: | ||
# Path to SARIF file relative to the root of the repository | ||
sarif_file: tfsec.sarif | ||
|
||
- name: tfsec commenter for PR | ||
uses: tfsec/tfsec-pr-commenter-action@main | ||
with: | ||
GITHUB_TOKEN: ${{ secrets.GITHUB}} | ||
working_directory: ./_example | ||
|
||
- name: 'Terraform security scan Advanced' | ||
uses: triat/terraform-security-scan@v3.0.3 | ||
if: github.event_name == 'pull_request' | ||
env: | ||
GITHUB_TOKEN: ${{ secrets.GITHUB}} | ||
tfsec_actions_working_dir: ./_example | ||
tfsec_actions_comment: true | ||
tfsec_output_format: sarif | ||
continue-on-error: true | ||
uses: clouddrove/github-shared-workflows/.github/workflows/tfsec.yml@master | ||
secrets: inherit | ||
with: | ||
working_directory: '.' |